ED
Product
Edirectory
51
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 1Low 0
Watch
Add Edirectory to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-9277 | 7.5 | Mar 2 | The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA (Enhanced Background Authentication) kept open connections without EBA Affected: through 9.0; 9.0; 9.0; 9.0 |
| CVE-2017-9267 | 7.5 | Mar 2 | In Novell eDirectory before 9.0.3.1 the LDAP interface was not strictly enforcing cipher restrictions allowing weaker ciphers to be used during SSL BIND operations Affected: before 9.0.3.1 |
| CVE-2017-5186 | 7.5 | Apr 27 | Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, and NetIQ eDirectory 9.x before 9.0.2 Hotfix 2… Affected: through 8.8 |
| CVE-2016-9167 | 7.5 | Mar 23 | NDSD in Novell eDirectory before 9.0.2 did not calculate ACLs on LDAP objects across partition boundaries correctly, which could lead to a privilege escalation by modifying user… Affected: through 9.0.1 |
| CVE-2016-5747 | 7.5 | Mar 23 | A security vulnerability in cookie handling in the http stack implementation in NDSD in Novell eDirectory before 9.0.1 allows remote attackers to bypass intended access… Affected: through 9.0 |
| CVE-2004-0079 | 7.5 | Nov 23 | The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake… Affected: 8.0; 8.5; 8.5.12a; 8.5.27; 8.6.2; 8.7; +2 more |
Showing 6